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Amendments to the Claims 

This listing of claims will replace all prior versions, and listings, of claims, in the 
application: 

Listing of Claims: 

1 . (Currently Amended) A system for detecting the presence of an observing program on a 
computer system, wherein the observing program is programmed to observe a user's activities on 
the computer system by monitoring user input entered through a user input device and to create 
data from the observing on a the computer system, the system including computer software for 
running on the computer system, the system comprising: 

observer data that includes data descriptive of an observer program, the observer program 
being programmed to observe a user's activities on the computer system by 
monitoring user input entered through a user input device and also operating to 
create a log file from the observing of the observer program; 
accessing instructions that access the observer data , the observ e r data including data 

descriptiv e of an observ e r program, th e obs e rver program b e ing programm e d to 
obs e rv e a us e r's activities on th e comput e r syst e m and also op e rating to cr e at e 
data from th e observing of th e observ e r program ; 
reading instructions that read memory of the computer system to obtain memory data; 
comparing instructions that compare the observer data with memory data read in from 
memory to determine whether the observer program is present on the computer 
system; 

generating instructions that generate results from the comparing, wherein the results 
generated indicate whether the observer program is present on the computer 
system; and 

outputting instructions that obtain the results and provide the results for a user. 
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2. (Original) The system of claim 1 wherein the reading instructions read the memory of the 
computer system by querying the operating system of the computer system for the tasks 
running and by examining task information provided by the operating system. 



3. (Original) The system of claim 1 wherein the outputting instructions provide the results to a 
user through a graphical user interface. 



4. (Original) The system of claim 1 wherein the reading instructions read the memory of the 

computer system by querying the file system of the computer system for the files located 
on storage media and by examining file information provided by the file system. 



5. (Original) The system of claim 1 wherein the reading instructions read the memory of the 
computer system by opening a file located on storage media and by examining contents 
of the file. 



6. (Original) The system of claim 1 wherein the observer data includes data descriptive of a 
plurality of observer programs and wherein the system compares the observer data with 
the memory data to determine whether any known observer program is present. 



7. (Original) The system of claim 1 further comprising countermeasure instructions wherein the 
countermeasure instructions alter the operation of the observer program. 



8. (Original) The system of claim 7 wherein the countermeasure instructions alter the operation 
of the observer program by altering observer program configuration data. 



9. (Original) The system of claim 7 wherein the countermeasure instructions alter the operation 
of the observer program by altering a file on the computer system. 
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10. (Original) The system of claim 7 wherein the countermeasure instructions alter the 

operation of the observer program by altering reporting data generated by the observer 
program. 

1 1 . (Original) The system of claim 7 wherein the countermeasure instructions alter the 

operation of the observer program by replacing reporting data generated by the observer 
program. 

12. (Original) The system of claim 7 wherein the countermeasure instructions alter the 

operation of the observer program by replacing a file of the observer program. 

13. (Original) The system of claim 1 wherein the observer data includes data descriptive of 

observing activity typical of observing programs and wherein the system compares the 
observer data with the memory data to determine whether any known observer program 
is present. 

14. (Original) The system of claim 1 further comprising the observer data, wherein the observer 

data includes a list of files and modules that are part of the observer program software, 
and wherein the reading instructions read the memory of the computer system by 
querying the operating system of the computer system for the tasks running and by 
examining task information provided by the operating system, and wherein the reading 
instructions also read the memory of the computer system by querying the file system of 
the computer system for the files located on storage media and by examining file 
information provided by the file system, and wherein the outputting instructions provide 
the results to a user through a graphical user interface. 

15. (Original) The system of claim 1 wherein the system is made available over a computer 

network through a web site. 
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16. (Currently Amended) A system for detecting the presence of an observing program on a 
computer system, wherein the observing program is programmed to observe a user's activities on 
the computer system by monitoring user input entered through a user input device and to create 
data from the observing on a the computer system, the system including computer software for 
running on the computer system, the system comprising: 

observer data that includes data descriptive of an observer program, the observer program 
being programmed to observe a user's activities on the computer system by 
monitoring user input entered through a user input device and also operating to 
create a log file from the observing of the observer program; 

means for accessing the observer dat a, the obs e rv e r data including data descriptiv e of an 
observer program, th e obs e rv e r program b e ing programm e d to observe a us e r's 
activiti e s on the computer syst e m and also operating to cr e at e data from the 
observing of the observ e r program ; 

means for reading memory of the computer system to obtain memory data; 

L 

means for comparing the observer data with memory data to determine whether the 

observer program is present on the computer system; 
means for generating results from the comparison, wherein the results generated indicate 

whether the observer program is present on the computer system; and 
means for outputting the results for a user. 

17. (Currently Amended) A method for detecting the presence of an observing program on a 
computer system, wherein the observing program is programmed to observe a user's activities on 
the computer system by monitoring user input entered through a user input device and to create 
data from the observing on a the computer system, the method being implemented through 
computer software for running on the computer system, the method comprising the steps of: 

accessing observer data, the observer data including data descriptive of an observer 

program, the observer program being programmed to observe a user's activities 
on the computer system by monitoring user input entered through a user input 
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device and also operating to create a log file data from the observing of the 

observer program; 
reading memory of the computer system to obtain memory data; 
comparing the observer data with memory data read in from memory to determine 

whether the observer program is present on the computer system; 
generating results from the reading and comparing, wherein the results generated indicate 

whether the observer program is present on the computer system; and 
outputting the results for a user. 

18. (Currently Amended) A computer-readable medium containing instructions for detecting 
the presence of an observing program on a computer system, wherein the observing program is 
programmed to observe a user's activities on the computer system by monitoring user input 
entered through a user input device and to create data from the observing on a the computer 
system, wherein the instructions comprise executable instructions for implementing a method 
comprised of the steps of: 

accessing observer data, the observer data including data descriptive of an observer 

program, the observer program being programmed to observe a user's activities 
on the computer system by monitoring user input entered through a user input 
device and also operating to create a log file data from the observing of the 
observer program; 

reading memory of the computer system to obtain memory data; 

comparing the observer data with memory data read in from memory to determine 
whether the observer program is present on the computer system; 

generating results from the reading and comparing, wherein the results generated indicate 
whether the observer program is present on the computer system; and 

outputting the results for a user. 

19. (Original) The computer-readable medium of claim 1 8 wherein the computer-readable 
medium is a data transmission medium. 
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20. (Currently Amended) A system for altering the operation of an observer program on a 
computer system, wherein the observing program is programmed to observe a user's activities on 
the computer system by monitoring user input entered through a user input device and to create 
data from the observing on a the computer system, the system including computer software for 
running on the computer system, the system comprising: 

observer data that includes data descriptive of an observer program, the observer program 
being programmed to observe a user's activities on the computer system by 
monitoring user input entered through a user input device and also operating to 
create a log file from the observing of the observer program; 

accessing instructions that access the observer data information, th e obs e rv e r information 
including data descriptiv e of th e observ e r program, th e observ e r program b e ing 
programm e d to observ e a user's activiti e s on th e comput e r system and also 
operating to cr e ate data from th e obs e rving of th e observ e r program ; 

reading instructions that read memory of the computer system to obtain files relating to 
the observer program; 

altering instructions that alter a file relating to the observer program such that the 
operation of the observer program is changed. 

21. (Original) The system of claim 20 further comprising an observer detection program. 

22. (Original) The system of claim 20 further comprising inputting instructions that display to a 

user options regarding the altering and that take input from the user relating to the 
options. 

23. (Original) The system of claim 20 wherein the altering instructions alter the operation of the 

observer program by altering observer program configuration data. 



Page 7 of 12 



Appl. No. 09/491,727 

Amdt. Dated January 18, 2005 

Reply to Office Action of September 14, 2004 

24. (Original) The system of claim 20 wherein the altering instructions alter the operation of the 
observer program by altering a file on the computer system. 



25. (Original) The system of claim 20 wherein the altering instructions alter the operation of the 
observer program by altering reporting data generated by the observer program. 



26. (Original) The system of claim 20 wherein the altering instructions alter the operation of the 
observer program by replacing reporting data generated by the observer program. 



27. (Original) The system of claim 20 wherein the altering instructions alter the operation of the 
observer program by replacing a file of the observer program. 



28. (Original) The system of claim 20 wherein the system is made available over a computer 
network through a web site. 



29. (Currently Amended) A system for altering the operation of an observer program on a 
computer system, wherein the observing program is programmed to observe a user's activities on 
the computer system by monitoring user input entered through a user input device and to create 
data from the observing on a the computer system, the system including computer software for 
running on the computer system, the system comprising: 

observer data that includes data descriptive of an observer program, the observer program 
being programmed to observe a user's activities on the computer system by 
monitoring user input entered through a user input device and also operating to 
create a log file from the observing of the observer program; 
means for accessing the observer data information, th e observer information including 
data d e scriptive of th e observ e r program, the obs e rv e r program b e ing 
programm e d to obs e rve a us e r's activiti e s on th e computer syst e m and also 
operating to cr e ate data from th e observing of the observ e r program ; 
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means for reading memory of the computer system to obtain files relating to the observer 
program; and 

means for altering a file relating to the observer program such that the operation of the 
observer program is changed. 

30. (Currently Amended) A method for altering the operation of an observer program on a 
computer system, wherein the observing program is programmed to observe a user's activities on 
the computer system by monitoring user input entered through a user input device and to create 
data from the observing on a the computer system, the method being implemented through 
computer software for running on the computer system, the method comprising the steps of: 

accessing observer data information , the observer data information including data 

descriptive of the observer program, the observer program being programmed to 
observe a user's activities on the computer system by monitoring user input 
entered through a user input device and also operating to create a log file data 
from the observing of the observer program; 

reading memory of the computer system to obtain files relating to the observer program; 
and 

altering a file relating to the observer program such that the operation of the observer 
program is changed. 

3 1 . (Currently Amended) A computer-readable medium containing instructions for altering the 
operation of an observer program on a computer system, wherein the observing program is 
programmed to observe a user's activities on the computer system by monitoring user input 
entered through a user input device and to create data from the observing on a the computer 
system, wherein the instructions comprise executable instructions for implementing a method 
comprised of the steps of: 

accessing observer data information , the observer data information including data 

descriptive of the observer program, the observer program being programmed to 
observe a user's activities on the computer system by monitoring user input 
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entered through a user input device and also operating to create a log file data 
from the observing of the observer program; 
reading memory of the computer system to obtain files relating to the observer program; 
and 

altering a file relating to the observer program such that the operation of the observer 
program is changed. 

32. (Original) The computer-readable medium of claim 31 wherein the computer-readable 
medium is a data transmission medium. 
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